ISO 27001 is a globally recognized framework for information security management. It outlines specifications for establishing, implementing, maintaining, and continually enhancing an information security management system (ISMS). Businesses of all sizes can gain advantages from ISO 27001 by reducing risks to their information assets. Achieving IS